# US 11,115,439 B2 · Automated security solutions identification and architecture design

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,115,439 B2
- Document ID: US11115439B2
- Status: Granted
- Kind: B2
- Application number: 16/275,953
- Filed: 2019-02-14
- Published: 2020-08-20
- Granted: 2021-09-07
- Earliest claimed: 2019-02-14
- Assignees: Accenture Global Solutions Limited
- Applicants: Accenture Global Solutions Limited
- Inventors: Ebrahim Tarameshloo; Amin Hassanzadeh
- Web page: https://patentgrep.com/patent/US11115439B2

## CPC

- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- G06N 5/01: Dynamic search techniques; Heuristics; Dynamic trees; Branch-and-bound
- G06N 20/00: Machine learning
- G06N 5/022: Knowledge engineering; Knowledge acquisition
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06N: COMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS

## Abstract

Systems, apparatuses, and methods directed to security enhancement. One or more remote data sources may be accessed to retrieve remote data associated with security for a computing architecture. An input model of an input network security architecture may be identified. One or more user-based constraints may be identified. An output model may be automatically generated based on the input model, the remote data and the one or more user-based constraints. The output model is an output network security architecture that complies with the one or more user-based constraints.

## Claims

### Claim 1

A security design system, comprising:
an interface to access one or more remote data sources to retrieve remote data associated with security for a computing architecture; and
a processor communicatively coupled to the interface, wherein the processor is configured to:
identify an input model of an input network security architecture;
identify one or more user-based constraints;
automatically generate an output model based on the input model, the remote data and the one or more user-based constraints, wherein the output model represents an output network security architecture that complies with at least one of the one or more user-based constraints;
compare the input model and the one or more user-based constraints to previous network security architecture models and previous user-based constraints associated with the previous network security architecture models to identify one or more similar network security architecture models from the previous network security architecture models that are similar to the input model; and
automatically generate the output model based on the one or more similar network security architecture models.

### Claim 2 (depends on 1)

The system of claim 1, wherein the processor is configured to generate a plurality of different output models based on the input model, the remote data and the one or more user-based constraints, wherein each of the plurality of different output models represents an output network security architecture that complies with at least one of the one or more user-based constraints.

### Claim 3 (depends on 1)

The system of claim 1, wherein the one or more user-based constraints is to include one or more of a cost constraint, a time constraint, a security based constraint or a goal constraint.

### Claim 4 (depends on 1)

The system of claim 1, wherein the remote data is to include one or more of hardware specifications, costs of security implementations, time for security implementations, network threat data or webpage data.

### Claim 5 (depends on 1)

The system of claim 1, wherein the input model and the output model are each a directed graph.

### Claim 6 (depends on 1)

The system of claim 1, wherein the processor is configured to:
receive an input data structure that corresponds to the input network security architecture;
conduct an automated analysis of the input network security architecture to identify one or more missing elements that are part of the input network security architecture and missing from the input data structure; and
generate the input model from the input data structure and the automated analysis.

### Claim 7

A method, comprising:
accessing one or more remote data sources to retrieve remote data associated with security for a computing architecture;
identifying an input model of an input network security architecture;
identifying one or more user-based constraints;
automatically generating an output model based on the input model, the remote data and the one or more user-based constraints, wherein the output model represents an output network security architecture that complies with at least one of the one or more user-based constraints;
comparing the input model and the one or more user-based constraints to previous network security architecture models and previous user-based constraints associated with the previous network security architecture models;
based on the comparing, identifying one or more similar network security architecture models from the previous network security architecture models that are similar to the input model; and
automatically generating the output model based on the one or more similar network security architecture models.

### Claim 8 (depends on 7)

The method of claim 7, further comprising generating a plurality of different output models based on the input model, the remote data and the one or more user-based constraints, wherein each of the plurality of different output models represents an output network security architecture that complies with at least one of the one or more user-based constraints.

### Claim 9 (depends on 7)

The method of claim 7, wherein the one or more user-based constraints includes one or more of a cost constraint, a time constraint, a security based constraint or a goal constraint.

### Claim 10 (depends on 7)

The method of claim 7, wherein the remote data includes one or more of hardware specifications, costs of security implementations, time for security implementations, network threat data or webpage data.

### Claim 11 (depends on 7)

The method of claim 7, wherein the input model and the output model are each a directed graph.

### Claim 12

A non-transitory computer readable medium comprising a set of instructions, which when executed by one or more processors of an authentication device, cause the one or more processors to:
retrieve remote data associated with security for a computing architecture;
identify an input model of an input network security architecture;
identify one or more user-based constraints;
automatically generate an output model based on the input model, the remote data and the one or more user-based constraints, wherein the output model represents an output network security architecture that complies with at least one of the one or more user-based constraints;
compare the input model and the one or more user-based constraints to previous network security architecture models and previous user-based constraints associated with the previous network security architecture models to identify one or more similar network security architecture models from the previous network security architecture models that are similar to the input model; and
automatically generate the output model based on the one or more similar network security architecture models.

### Claim 13 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the one or more processors are to generate a plurality of different output models based on the input model, the remote data and the one or more user-based constraints, wherein each of the plurality of different output models represents an output network security architecture that complies with at least one of the one or more user-based constraints.

### Claim 14 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the one or more user-based constraints is to include one or more of a cost constraint, a time constraint, a security based constraint or a goal constraint.

### Claim 15 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the remote data is to include one or more of hardware specifications, costs of security implementations, time for security implementations, network threat data or webpage data.

### Claim 16 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the input model and the output model are each a directed graph.

### Claim 17 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the one or more processors are to:
receive an input data structure that corresponds to the input network security architecture;
conduct an automated analysis of the input network security architecture to identify one or more missing elements that are part of the input network security architecture and missing from the input data structure; and
generate the input model from the input data structure and the automated analysis.